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MEMORANDUM FOR: 
FROM : 

SUBJECT : 

REFERENCE : 


Director Central Intelligence 

Director Data Processing 

Director, Office of Central Reference 

SAFE Concerns 

Your 


1. The enclosed response to the STAP memorandum 
is submitted for your use in preparing for our meeting 
on this subject. 

2. We propose that Mr . present a brief summary 

elaborating on the enclosed material and be prepared to 
discuss the project status and direction as you see fit. 

Messrs . have 
one short briefing on SAFE to the STAP. It appears that 
a more extended interaction with that body is in order. 

4. The first enclosure addresses your expressed specific 
concerns. The second, the remainder of the STAP memorandum. 
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CONCERN : 

1.0 What steps are being taken to ensure that the Agency, 
rather than the contractor is in control of the technical 
aspects of the design of the system? 


. I tUr s7r»~f, t : 

RESPONSE: ,< ■.,) ’ / r *' , , -K V 

1.0 In recognition of the problems of technical communication 
and management control comjjunded by geographical separation 
a number of steps have been taken as follows: 




a) The Government has contracted for a system development 
rather than technical effort. The contractor is 
responsible for the— j feeeten. c a -1 development with 
government controls as noted below. } 


h) ( The Government defines the functions and performance 
of the system as seen from a users perspective. 


/ 


pf ( The development is performed to government require- 
ments specification in accordance with MIL Stds. 490 
and 154 with government approval required of all 
specifications and designs. 


d) The Government approves all solicitation documents 
evaluation plans and contract awards by TRW. 
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e) Monthly formal project reviews are conducted by f J}<l~ 
CSPO. . ^ < % ) y 


f) Technical staff interaction daily by phone and 
virtually continuously through travel maintains 
communication . 


g) The contractor has several permanent representatives 
located in Rosslyn. 


h) A full time representative is being considered for 

transfer to California^ „ \ 

\ 

i) Travel will continue to be heavy in any event. \ 

j) Delays in decision making are not geographical 
problems. They are problems associated with hard \ 

\ 

choices. An on-site representative could provide j 

/ 

oversight and some guidance but those problems / 

of larger scope are not one-man problems. 




The Agency has in place a strong technical management 
team. The contract effort is under control and the 
needs of two Agencies are being addressed successfully. 


Approved For Release 2001/04/01 : CIA-RDP84-00933R0005001 20005-1 



4 


Approved For ReleaW 2001/04/01 : CIA-RDP84-0093§I^0005001 20005-1 

CONCERN : 


2.0 How is SAFE management ensuring that a final working 
system has been developed from the continuing evolution of 
an operationally valid pilot system? How has SAFE taken 
advantage of the experience of similar, very large systems 
in their: 


1) system architecture, 

2) communication and control, and 

3) changing performance requirements? 

n 

RESPONSE: 


2 . 0 ^ The "operationally valid pilot system ,l from which evolution 

^ k ,f 1 ^ ij 4 c -M / *&L t h 1 £ o $ * ? ! 

will take place is the .IOC systemr • Experience with«" Interim" 

_ A ^ I 

SAFE system^is being used in building the operational system. 


Data and usage pattern^as well as user reactions^ are used 
in requirements specifications, system sizing, function 
allocation and usage scenario development. Fa rther -, foes sage 


\and query analyses .are being used to es timate tEaJLf lc-on 


"tinai" system . 


* Mb have dictated the maximum use of general purpose m4 E 




■;?r- 


and^ software to ensure that the changes required in future 
years can be accommodated. 


Xp 


The system architecture proposed is based on TRW and 
Government experience with large systems. It distributes 
communications and control functions as well as file processing 
such that bottlenecks are avoided and parallel expansion is 
possible without redesign. New functions may be added at 
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er i' 

either the top ea mid-level processors ,and functions may be 
moved between levels to compensate for loading or usage changes. 


We expect the initial system to have raa&y shortcomings. 
All major systems do. We— are st rivin g l a d o two things*: 


cr) Provide valuable and reasonable service to a 

y 

s.ignificantr-as5T~population and 


.x' 


— bj-' — Permit change and -improvement 


t 'f 

he initial 

improvements in service and value over the current environment. 


We expect the initial system to provide significant 


<L W ,v <L M P c _ 

cautionary note^is well founded. We should expect -ah 

■ /ffr 1 ° ^ ' 

introductory^perxoKa for services of up to a year ar 


^ ^ v — . 

.shoul d expect -to continue __ovo-lutioTr~ih future' years . The 


SAFE budget for 1982 and beyond recognizes this process. 


A gain, t he -I QC system is the "operationally valid" pilot 
system from which the long range system will evolve. 
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CONCERN : 

3 . 0 The SAFE user community consists of Intel 1 i non c. a- 
Comm unity~i rialvsts covering thcTfull spectrum ofresearch 
xnto""1 r oreign political, military, economic, scientific, 
and technological activity. Their effective use of this 
system and, ultimately, the quality of intelligence they 
produce rest on whether their real needs can be identified 
and satisfied by the system. 


RESPONSE: 

3.0 '-(See it^STTr) 


• _ __ 

' t r\ * f I m 1— t>A 'T. . 




Va. i 





There has been more user involvement in the definition 
of the SAFE System than any system with which we are 
familiar. The interaction is continuing to refine and 
revalidate the system functions with the user. lie— come^ 
preeardrGUS ly c io s e. at times t o provldi n g • -t o o much - inpu t 


te-Hdre^procesSF-and de^r ailing the development effort. The 
CSPO maintains the balance of interactions with the contractor 


, , tycfCs 

and - through JUrSfer r 


f/y^ -*** */ d Jfy 


t atfves ^ - the user. 

All data gathered on the interim system usage has 
been forwarded to TRW. All prior study material has 
likewise been forwarded. These data are used to develop 
system design and flow threads. ^ 




~j~ I 
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CONCERN : 

4.0 How can the Agency make a reasonable evaluation of the 
current status of SAFE with major portions of the proposed 
operational capabilities either unspecified or imcominunicated 
to the Agency? For example, 

1) the user command language and its parsing, 

2) the user programming language, 

3) the user editing languages, and 

4) procedures for backup, including regeneration of 
derived files lost in crashes. 


are specified in 

the ^^SRD written by the Government. The contractor's 

translation of those capabilities to system design are 
n toe o j 

encompassed in the — "A" Spe c if i catlo n 7 Syst e m- Design " S pec if icatxon-- 
arrd- sub-system and element specifications. These are being 
developed on schedule with a normal amount of difficulty. 

Problems are addressed early in the process and corrective action 


RESPONSE: f) 0 ^ k-** 

tut 

4. ffihk operational capabilities required 


is taken. xF-requon t me e tings and ~ e xchanges uf " ducumenifa — and- 

i i 1 1 i ' r i 1 i~ p 1 1 1 1 1 T . 

views ate expected to yield an" acceptable result when the 
design documents are prepared.- Contract schedule, cost and 
management are all monitored for signs of difficulty. 


c 


f*- 


•&Y& 
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CONCERN : 

5.0 What actions are under way to insure that the Intelligence 
Community has access to CIA SAFE and that CIA SAFE has access 
to DIA SAFE as well as such systems as COINS and SOLIS? 


RESPONSE: 


STATINTL 


5.0 The basic system requirement has been given the 
contractor to provide interconnection between the two Agencies. 
Five lines will be provided with expansion capacity to 25. 

The control of access, differing security clearance practices 
and control of limited access information will have to be 
worked out among the using and security organizations of the 
Agencies. With the security features of the system being 
developed, it is hoped that administrative procedures and 


software safeguards will be adequate. 






Generalized community access has not been envisioned 
in the initial system and presents additional security and, 
more vitally, loading problems. Pre visions r Eor-#urtfaer 
1 inkagee-TCHTT - bS'- p r o v ided -f o r- -later use-y-^but - the us e o f 
such a linkage must be defined early within~tKe” Community 
3X-it~!s -to~ Xe ~.. deyGlHped . (Z*? 

This— ls__. a maj -or deviatic^from the basic SAFE concept. 

We believe that a "community" system should be developed 
after SAFE and that SAFE would be a prototype for replication 
and potentially be a node in a community network. 
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CONCERN: 


STATS PEC 


6.0 How will SAFE deal with open source material? Will U9| 
material, either finished publications or field reporting, 
be made available to the analyst through SAFE? How will SAFE 
deal with current newspaper and journal entries? 


STATINTL RESPONSE: 


STATS PEC 


6. an input to SAFE. Both finished | 

and raw input are supplied to SAFE. Oth er u{ 


repSHEAfiSPEC 


"have- not been planned for on-line access. Wire services, if 
subscribed to, can be added either on-line or as separate 
collectors for periodic input to SAFE. BartcrtJcLiTks -such as 


N . Y . Time s ~ Tfiay" 


“adequate protection , for use 


from analysts workstations. This has not been asked for, but 
if required by the user itVnay be added a\ moderate expense 
as a controlled link. It is\currently available in the 
Terminal Access, Room and this indirect link wil\ be used 
initially. \ x 
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CONCERN : 

7.0 What steps are being taken to ensure that SAFE will be 
designed to allow collaborative usage? 


RESPONSE: 


7. Teleconferencing 




jt/y*. * <>/if£ 


or deferred 


-for— l ate r implementation as initially proposed by TRW. This 

£/✓ *_ AOfK , , 

will be permitted between Ageneie«-~as well as within each 


Ag ency j ^ u- > 1 1 zpocx-i y • Ctm fi t~i ~ 




*■**■*-. 


/r-TT - - 

The generalized routing function will also be used for 
staffing and coordination as well as for further dissemination 
of information. ^ 


We agree /that these functions will be of considerable 
value. Conferencing has/consistently appeared loWon the 
list of priorities siijoe routing par£>ially fulfilled that 
need. ' 
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CONCERN : 

8.0 What steps are under way to ensure that in the 
procurement of major hardware items, these items will bo 
compatible with existing Agency systems? 

RESPONSE: "7^ ^ 

^C'. C 1 ’Os/f ioV p 

8. Thg Unrips imio luad h3vp different hardware. Cl Ay ui^i 

*tf—r ... 

i-s— aa=JLBM sifep while DIA is Honeywell.. Compatibility 
has been factored into the hardware RFP and a value -se+> 

^ for cost evaluatior^ Ineumbeni^yvenaors thus have 

a cost advantage roughly equivalent to anticipated cost 
of supporting varied architectures. 

Interconnection/) is planned and is part of the contracted 
effort. The interface software for SAFE has been considered 
as a direct contract cost. Th e— existing s y st em proto c ols 
ar» - spe cif-ied txr~wh±ch SAFE must interface. 
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CONCERN: C. "As Described by - 
RESPONSE: The SAFE 



has defined the functions 

is to perfnxm^'jfi'he Consolidated 
• ’ ( c$r2 0 ) 

SAFE Requirements Document^, which is the foundation 

of the technical development, was developed with 

and largely by the^using community. In the CIA 

this work began in 1972 and has included: 

o Pilot groups of 50 analysts defining useful 
functions 


o 

o 

o 

o 

o 

o 

o 

o 


Pilot systems development in 1973/4 

Pilot branches to date provide usage data 

User work shops in 1975 

600 analyst survey in 1976 

SAFE Procedures Development Laboratory 

Project Upstairs/Downstairs with analysts 

Newsletters 

Direct interaction with CSPO and contractor 
of NFAC user representatives 


In DIA there are 57 points of contact in user organizations 
who provide advice on requirements and are fully informed 
of project status. An extended data collection effort 
from 1977 to the present has developed user requirements 
which have been staffed with top level user management. 



Four former analysts are resident in the CSPO 

a-'nj ft c </v,- 

to control the flow of^/requirements and to ensure 
that they are met. This group coordinates heavily 

with both Agencies. 
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CONCERN: D. How can CIA .... 

RESPONSE: The Government defines the functional and 

operational capabilities of the system. The 
Consolidated System Requirements Document is 
a contractually binding document. The current 
evaluation of SAFE centers primarily on the 
conti actor s performance in meeting the require- 
ments. In such areas as user language development , 
a close interaction with the user representatives 
and the contractor to minimise the time required 
for a satisfactory language definition. For example, 
Mr * of 

the week of 17 March in a continuing liaison to 
ensure that user scenarios used for language/ 
interaction definition and design are correct. 


Approved For Release 2001/04/01 : CIA-RDP84-00933R0005001 20005-1 



STATS PEC 


Approved For Relel^ 2001/04/01 : CIA-RDP84-009J»A0005001 20005-1 

CONCERN: B. IIow will SAFE deal with Open Source Material? 

RESPONSE : continue as a direct input to SAFE. Raw 


/ 





input is provided electrically. Other open 
source material is available on separate terminals- 
—but may be accumulated directly if required. 
Interactive data bases and their use require 
connections with outside communications which 
have been forbidden on security grounds. An 
intermediate process can be introduced to 
provide isolation should vastly improved access 
be required by the user. 

Vast quantities of open source material are 
and will be entered by OCR and individual analysts 
from periodicals, newspapers, etc. OCR has begun 
experimentation wtih Optical Character Reader 
processing of printed copy. This may provide 
further input in significant volumes. 
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Response to Specific Concerns Regarding SAFE 


CONCERN: 

RESPONSE: 


A. There are no plans at present to connect 
the CIA and DIA SAFE Systems. 

The CIA and DIA SAFE systems will be interconnected. 

Since neither Agency's users have specified this 

connection as a requirement, the contractor did 

not include it in his initial System Requirements 

Specification. The project office has initiated 

a change order to include the connection in early 

1984. Five lines are planned initially with expansion 

capacity to twenty-five in the initial design. 

DIA SAFE has access to COINS and thus to 
to SOLIS. The CIA analyst will thus be able to 
access these systems via this link. 
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